Senior Security Engineer, Nasuni

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field, or equivalent experience
• Seven-plus years’ experience in cybersecurity with a product and application security engineering background
• Five-plus years of experience with public cloud providers (AWS, Azure, GCP)
• Experience with SAST, DAST, IAST and RASP
• Experience with container security, such as Docker and Kubernetes
• Knowledge of CI/CD platforms, such as Jenkins and CircleCI
• Experience building prototypes of tools and exploits, as well as conducting vulnerability and penetration tests
• Proficiency in software development (Java, Rust, Golang, Python, C++, Ruby, etc.) and familiarity with automation frameworks
• Experience with security requirements for APIs
• Strong knowledge of common security frameworks and standards (OWASP, NIST, CIS, MITRE ATT&CK)

Desirable

• Nasuni is seeking a highly skilled Senior Security Engineer to strengthen our security engineering program
• This role is pivotal in securing our infrastructure, applications, and data while enabling teams to move quickly and safely
• You will work closely with software engineering, product, compliance, and other teams to design, implement, and maintain secure systems at scale
• Serve as the primary management point of contact for product cybersecurity requirements, initiatives and escalations
• Lead continuous product and application security reviews combining automated and manual testing methods
• Design, develop, evaluate and implement security controls, tools and processes across infrastructure and applications
• Evaluate the existing product ecosystem and propose product changes to security, product and engineering leadership
• Lead threat modeling, security architecture reviews, and secure code review for new and existing products
• Collaborate with architects, developers and product managers to secure CI/CD pipelines, automate security testing, and achieve a mission of secure design
• Lead internal and external vulnerability and penetration testing
• Manage vulnerability assessment and remediation processes across cloud, on-prem, and hybrid environments
• Focus on security process efficiencies, prioritizing advanced tasks to keep pace with product demand
• Collaborate with team members and align with security, audit and risk management leadership
• Mentor junior security team members and foster a security-first culture across engineering and product teams
• Stay informed on emerging threats, vulnerabilities, and best practices to proactively improve defenses
• Perform other duties as assigned